Lief · Lief · CVE-2022-43171
**Name of the Vulnerable Software and Affected Versions**
LIEF versions prior to 0.12.3
**Description**
A heap buffer overflow in the `parse dyldinfo generic bind` function of LIEF's `BinaryParser` allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.
**Recommendations**
For versions prior to 0.12.3, update to version 0.12.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `parse dyldinfo generic bind` function until a patch is available. Avoid processing untrusted or crafted MachO files with the affected LIEF versions.